Privacy Policy of the Provadis Group Companies


Contents

I. General section – general, websites and mobile apps of the individual Provadis Group companies

  1. General information
  2. Your rights under the GDPR
  3. More information regarding the use of our websites or mobile apps for informational purposes only
  4. General notes on additional functions and possible uses
  5. Specific notes on the right to object or withdraw

II. Specific section – specific processing activities of the Provadis Group companies

  1. Use of our mobile apps
  2. Specific uses of our website
  3. Third-party services
  4. Newsletter
  5. Web analytics
  6. Social media
  7. Online advertising and user behavior analysis
  8. Processing of applications

I. General section – general, websites and mobile apps of the individual Provadis Group companies

A.   General information‎

(1) Below, we will provide you with information regarding the personal data that we collect in general as well as the personal data that we collect about your use of the individual Group websites or mobile apps. Personal data refers to all the data that can be linked to you personally, including name, mailing address, email addresses, or user behavior. “We” refers to the companies of the Provadis Group listed at the following link: http://www.provadis.de/gruppe.

(2) The controller as defined in Article 4(7) of the EU General Data Protection Regulation (GDPR) is as follows:

a) For processing carried out by Provadis Partner für Bildung und Beratung GmbH (hereinafter referred to as “Provadis”)
Legal Notice: https://www.provadis.de/footer/impressum/

b) For processing carried out by NOVIA Chromatographie und Messverfahren GmbH
Legal Notice: https://www.provadis-novia.de/footer/impressum/

c) For processing carried out by Provadis School of International Management and Technology AG
Legal Notice: https://www.provadis-hochschule.de/footer/impressum/

d) For processing carried out by Provadis Professionals GmbH
Legal Notice: https://www.provadis-professionals.de/footer/impressum/

e) For processing carried out by Provadis Transfer GmbH
Legal Notice: https://www.provadis-transfer.de/transfer/footer/impressum/

You can reach the Data Protection Officer of the above companies at datenschutz@infraserv.com or the following mailing address:

Infraserv GmbH & Co. Höchst KG
Data Protection Officer
Industriepark Höchst
Building C770
65926 Frankfurt am Main
Germany

(3) When contacting us, e.g. by email or by using a contact form, the data you provide (e.g. your email address, name and phone number) will be processed by us in order to respond to your questions. We will erase any data that we collect once the data is no longer needed for its original processing purpose. We are generally required by commercial and tax law to retain your address, payment and order data for ten years. When there is a legal basis for further processing (e.g. statutory retention obligations), we will restrict processing as much as possible.

(4) When we use external service providers for individual functions or wish to use your data for advertising purposes, we will provide you with a detailed explanation of the underlying processes. This includes the established criteria about the duration of storage.

B.   Your rights under the GDPR

(1) You have the following rights with respect to your personal data:
–   Right of access
–   Right to rectification or erasure
–   Right to restriction of processing
–   Right to object to processing
–   Right to data portability
–   Right to lodge a complaint with a supervisory authority

(2) Our supervisory authority is “Der Hessische Datenschutzbeauftragte” (The Hessian Data Protection Officer):

Der Hessische Datenschutzbeauftragte
Postfach 3163
65021 Wiesbaden
Germany
Phone: +49 611 1408-0
Fax: +49 611 1408-611
Email: poststelle(at)datenschutz.hessen.de

C.   More information regarding the use of our websites or mobile apps for informational purposes only

(1) When visiting and using our website for informational purposes only – i.e. if you do not register or otherwise provide us with information – we only collect the personal data that your browser transmits to our server. The following data is technically necessary for us to display our websites or mobile apps to you and to guarantee their stability and security (the legal basis for the processing of your data is Article 6(1)(f) GDPR):

–   IP address
–   Date and time of inquiry
–   Time zone difference to Greenwich Mean Time (GMT)
–   Content of the request (specific page)
–   Access status/HTTP status code
–   Data volume transmitted in each case
–   Referring website
–   Browser used to access the site
–   Operating system and its interface
–   Language and version of the browser software

(2) In addition to the aforementioned data, cookies are stored on your terminal when you visit our website. Cookies are small text files which are stored on your hard drive and categorized to your browser. They provide certain information to the party which places the cookies (i.e. us). Cookies cannot run any programs or transmit viruses to your computer. The use of cookies improves the user-friendliness and effectiveness of our online services.

(3) Use of cookies

a) The websites or mobile apps use different kinds of cookies:

Transient cookies are automatically deleted when you close the browser. This includes session cookies in particular. They store a session ID which can be used to ascribe various inquiries from your browser to the joint session. Session cookies allow us to recognize your terminal if you return to our website. They are deleted when you log out or close your browser.

Persistent cookies are automatically deleted after a stated period of time which can vary according to the cookie. You can delete the cookies at any time in the security settings for your browser.

b) You can set your browser based on your preferences, which may include refusing the storage of third-party cookies or all cookies. Please note that in this case you may not be able to access the full functionality of this website.

D.   General notes on additional functions and possible uses

(1) Alongside the use of our websites and mobile apps solely for informational purposes, we offer various services which you may wish to use. To use these services, you will generally have to provide additional personal data which we use for service provision and in conformity with the aforementioned data processing policies.

(2) We sometimes use external service providers to process your data. These service providers have been carefully selected and contracted by us. They are bound by our instructions and are regularly checked.

(3) We may also share your personal data with third parties when promotions, competitions, conclusions of contracts or similar services are offered by us jointly with our partners. You will receive more detailed information when you enter your personal data. More information can also be found below in the description of the services.

(4) In the description of the services below, we will inform you of the implications involved when our service providers or partners are based in a country outside of the European Economic Area (EEA).

(5) From the moment you buy goods, use services or order information and promotional materials from us, we will email you with information on goods and services of the Provadis Group (www.provadis.de/gruppe). We will send these emails only after an order has been placed and by using what is known as the double opt-in procedure. This means that we will send you these information emails only after you confirm your registration by clicking the link sent to you in a confirmation email. Your consent to receiving such emails can be withdrawn at any time. To withdraw your consent, please contact marketing@provadis.de or use the contact details provided in the Legal Notice section. You can also click on the link provided at the end of each information email. In the process, there will be no costs incurred other than the transmission costs according to the basic tariffs.
Your data will be processed in accordance with this privacy policy.

E.   Specific notes on the right to object or withdraw

(1) You can withdraw your consent to the processing of your data at any time. Once you have notified us that you are withdrawing your consent, it will affect the permissibility of the processing of your personal data.

(2) Insofar as we justify the processing of your personal data by weighing interests, you may object to processing. This is particularly the case when processing is not necessary for meeting the requirements of the contract, which we will illustrate in the following description of functions. When you submit your objection, we will ask you to state the reasons why we should not process your personal data as we do. In the event of justified objection, we will examine the circumstances and either stop or adjust our data processing or advise you of our compelling and protection-worthy reasons for continuing to process your data.

(3) You can of course refuse the processing of your personal data for the purposes of advertising and data analysis at any time. You can notify us of your objection to advertising regarding direct marketing or advertising by all Provadis Group companies at:

marketing@provadis.de

or under the following address:
Provadis Partner für Bildung und Beratung GmbH
Marketing
Rudolf-Amthauer-Straße, Building B845
65926 Frankfurt am Main
Germany

II. Specific section – specific processing activities of the Provadis Group companies

A.   Use of our mobile apps

(1) Note on mobile apps
In addition to our website, we provide mobile apps that you can download to your mobile device. These include two types of apps:
– Apps that we are responsible for (apps we develop or apps where we manage the content)
– Apps from third-party sources that we assume no responsibility for

a) When downloading the mobile app, the necessary information is transferred to the App Store, i.e. in particular the username, email address, customer number of your account, time of download, payment information and the individual device identification number. We have no influence on this data collection and shall not be responsible for it. We only process the data if it is necessary for downloading the mobile app to your mobile device.

b) In individual cases, we may also require additional information such as the device identification, unique number of the end device (IMEI = International Mobile Equipment Identity), unique number of the network subscriber (IMSI = International Mobile Subscriber Identity), mobile phone number (MSISDN), MAC address for WIFI use, name of your mobile device or email address.

c) Use of your address book and calendar

(i) When you first use mobile apps that we are responsible for, a pop-up window will appear in which we ask for permission to use your personal data, e.g. your address book or calendar. We will not use this data without your consent. However, please note that if you do not consent to the use of this data, you may not be able to use the full functionality of our app. You can provide or withdraw consent at any time within the settings of the app or your operating system.

(ii) If you allow access to this data, the mobile app will only access your data and transmit it to our server if it is required to ensure the functionality of the app. We will treat your data as confidential and erase your data if you withdraw your consent or if the data is no longer necessary for the services we provide and if no legal retention obligation exists. The legal basis for such processing is Article 6(1)(f) GDPR.

(2) Push notifications

The use of the feature that allows you to receive push notifications in our mobile apps is voluntary and not required for the use of our services. Via the push notification feature, we transmit only general information about our offers and organizational information about your educational program.

To send push notifications to end users’ mobile devices, we use the service of OneSignal, Inc., a company located at 2850 S Delaware St Suite 201, San Mateo, CA 94403, USA (hereinafter referred to as “Push Service Provider”).

Push notifications are sent using a pseudonymized push token assigned by the operating system you use or by the corresponding push service. The push service uses this push token to store data, such as device type, time of use, IP address during use, language settings and the push notifications transmitted to the device according to the wording and status of your push subscription, and assigns these to your mobile device. The Push Service Provider cannot attribute this data to any of your other personal data. Push notifications are sent based on the consent you have given during the installation of the app in accordance with Article 6(1)(a) GDPR.

You can withdraw your consent at any time by disabling the feature “Push-Nachrichten empfangen” in the app’s settings or by deactivating any push notifications in the settings of the operating system.

You can find more information about OneSignal’s privacy policy at https://onesignal.com/OneSignalSAASPrivacyPolicy.pdf.

(3) Crash notifications

To improve the stability and reliability of our apps, we rely on anonymous crash reports.

iOS apps: If you have voluntarily and explicitly agreed to the transmission of a crash report in the settings of the app or after a crash, anonymous information about the crash (the app’s status at the time of the crash, stack trace, the manufacturer and the operating system of the mobile phone, and last log messages) will be transmitted to Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA and stored there for evaluation. According to Apple Inc., this information does not contain any personal data.

Android apps: If you have voluntarily and explicitly agreed to the transmission of a crash report in the settings of the app or after a crash, anonymous information about the crash (the app’s status at the time of the crash, stack trace, the manufacturer and the operating system of the mobile phone, and last log messages) will be transmitted to Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA and stored there for evaluation. According to Google LLC, this information does not contain any personal data.

B.   Specific uses of our website

(1) Use of our function for requesting an offer

a) When you use our website to request offers (for example, for services or seminars), you will be asked to provide your personal data so that we can process your request. The information required to process the request is separately marked. The submission of further information is voluntary. We use the data you provide to process your request and to perform any contract that may have been formed. The legal basis for this is Article 6(1)(b) GDPR.

b) When a contract has been formed, we are generally required by commercial and tax laws to retain your address, payment and order data for ten years.

(2) Use of our “Provadis Coach”

a) Insofar as you wish to use our Provadis Coach, you will have to register by entering your first and last name or your email address, as well as the password assigned by us which you are asked to change after your first log-in. The Provadis Coach is used for official purposes in the context of a booked seminar, apprenticeship or employment relationship. The Provadis Coach can provide you, as a participant, with learning content and appointments. It can also be used for the internal communication among participants and teachers/instructors.

b) When you use our Provadis Coach, your data required for the fulfillment of the contract will be held by us until the permanent deletion of your access after you complete your apprenticeship, further training or studies. We also keep the voluntary data you provide for the time you use the Provadis Coach, unless you delete your data first. All information can be managed and modified in the protected customer area. The legal basis is Article 6(1)(f) GDPR.

c) When you use the Provadis Coach, your data can be made accessible to other Provadis Coach participants. Unregistered members will not receive information about you. Your username will be visible for all registered members, regardless of whether you shared it.

d) In order to prevent unauthorized access to your personal data by third parties, the connection is encrypted via SSL.

(3) Signing up to events, trainings, seminars or courses – use of the “Seminar Finder”

a) When you use our website to book events, trainings, seminars or courses, you will be asked to provide personal data so that we can process your booking as a requirement for fulfilling the contract. The information required to process contracts is separately marked. The submission of further information is voluntary. We use the data you provide for the processing of your booking. The legal basis for this is Article 6(1)(b) GDPR.

We may also use the data you provide in order to inform you about other interesting offers from our range of products or to send you emails with technical information.

C.   Third-party services

Our online services are linked to other websites to give you the opportunity to receive related information that might interest you. We also use third-party apps or point to third-party apps on our website. We assume no responsibility for them. These websites or mobile apps, operated by other companies outside of our online or app services, are not subject to our control and are not covered by this privacy policy. When you access external websites or use external mobile apps via the links available on our website, the operators of these websites or mobile apps may collect your personal data. Please make sure that you agree with the respective operator’s data protection conditions before forwarding your personal data. We are not responsible (legally or otherwise) for the activities of other companies. Should we become aware of any legal violations, we will remove the corresponding links immediately.

D.   Newsletter

(1) You may subscribe to our newsletter to receive interesting information about our current offers. You can find our range of services, which we will inform you about in the newsletter, at: www.provadis.de/gruppe.

(2) We use what is known as the double opt-in procedure for our newsletter’s registration process. This means that after your registration we will send an email to the email address you provide, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your subscription within 48 hours, your information will be locked and automatically deleted after one month. We also store the IP addresses you have used and the times of registration and confirmation. The purpose of the procedure is to verify your registration and, if necessary, to identify any possible misuse of your personal data.

(3) The only requirement for sending the newsletter is your email address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis for such processing is Article 6(1)(a) GDPR.

(4) You can withdraw your consent to receiving the newsletter and unsubscribe from the newsletter at any time. You can withdraw your consent via the link included in every newsletter email, by sending an email to abmeldung@provadis.com or by sending a message to the contact details provided in the Legal Notice section.

(5) We would like to make you aware that we analyze your user behavior when sending the newsletter. This is done using the tracking functions developed by empaction GmbH (please see “Web analytics” for details). For this analysis, our emails include so-called web beacons or tracking pixels, which are single-pixel gifs stored on our website. To conduct the evaluations, we link the collected data and web beacons with your email address and an individual ID. Links included in the newsletter also contain this ID. We then use the collected data to create a user profile to tailor the newsletter to your personal interests. In doing so, we track when you read our newsletters and which links you click on in order to determine your personal interests. The data gathered is linked with the way you use our website.

You can object to this tracking at any time using the separate link provided in each email or by notifying us in another way. The information will be stored for as long as you are subscribed to the newsletter. After you unsubscribe from the newsletter, we store your data anonymously and for statistical purposes only. Tracking can also be avoided if you have deactivated the display of images in your email program. In this case the newsletter will not be displayed in its entirety and you may not be able to use all functions. If you elect to display images manually, the described tracking function is activated.

E.   Web analytics

(1) Use of Google Analytics

a) This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses cookies, which are small text files saved on your computer, to analyze how you use the website. This cookie-based information on your website user behavior is then sent to a Google server in the US where it is stored. However, in cases where IP anonymization is active on this website, Google will truncate your IP address within member states of the European Union and signatory states of the Agreement on the European Economic Area. Only in exceptional cases, will the full IP address be sent to and shortened on a Google server in the US. On behalf of this website’s operator, Google will use this information to evaluate your use of the website, compile reports about website activities, and provide the website operator with further services related to website and internet use.

b) The IP address sent by your browser as part of Google Analytics will not be linked to other data held by Google.

c) You can avoid the storage of the cookies by changing your browser settings. However, we would like to make you aware that, in this case, you may not be able to use the full functionality of this website. You can prevent Google from tracking this cookie-based information on your website user behavior (including your IP address) by downloading and installing the browser plug-in available under: tools.google.com/dlpage/gaoptout.

If you do not wish to use the browser add-on or are using a browser on a mobile device, you can also click this link to prevent any future Google Analytics tracking within this website (the opt-out works only in this browser and for this domain). In the process, an opt-out cookie will be stored on your device. If you delete your cookies in this browser, you will have to click this link again.

d) This website uses Google Analytics with the add-on “_anonymizeIP()”. This extension ensures that IP addresses are only processed in a truncated form to exclude the possibility of personal identification. This means that if the data collected allows conclusions about you as a person, this is prevented immediately, and the personal data is deleted immediately.

e) We use Google Analytics to regularly analyze and improve the use of our website. The statistics we obtain allow us to improve our online presence and give you a more engaging user experience. For the exceptional cases in which personal data is transferred to the US, Google is EU-US Privacy Shield certified, see privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Article 6(1)(f) GDPR.

f) Third-party provider details: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User Terms and Conditions: www.google.com/analytics/terms/de.html, Data Protection Overview: google.com/intl/de/analytics/learn/privacy.html, as well as the Privacy Policy: www.google.de/intl/de/policies/privacy.

g) This website also uses Google Analytics to analyze cross-device visitor activities via an assigned user ID. You can deactivate the cross-device analysis of your activities in your customer account under “My data” (“Meine Daten”), “Personal data” (“persönliche Daten”).

F.   Social media

(1) Use of YouTube videos

a) Our online services may include embedded YouTube videos that are stored on YouTube.com and can be played directly from our website. All videos are embedded in “privacy-enhanced mode”, meaning no data about you as a user will be sent to YouTube if you do not play the videos. The data specified in I. will not be transmitted until you play the videos. We cannot control this transmission of data in any way.

(b) When you visit the website, YouTube will be informed that you have accessed the corresponding subpage of our website. In addition, the data indicated in I. of this privacy policy will be transmitted. This will occur regardless of whether or not you have a YouTube user account which you are logged into. If you are logged in with Google, your data will be directly linked to your account. If you do not wish this data to be linked to your YouTube profile, you should log out before activating the button. YouTube stores your data in the form of user profiles and uses these for advertising and market research purposes and/or to customize its website. Such use will mainly occur (even for users who are not logged in) to render targeted advertisement and to inform other users in the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you must contact YouTube.

c) Further information regarding the purpose and scope of data collection and processing by YouTube can be found in the privacy policy. You will also find further information there regarding your rights and the possible settings that can be used to protect your privacy: google.de/intl/de/policies/privacy. Google also processes your personal data in the US and is EU-US Privacy Shield certified, see www.privacyshield.gov/EU-US-Framework.

(2) Integration of Google Maps

a) We use Google Maps on this website. This allows us to display interactive maps within our website and to give you convenient access to map functions.

b) When you visit the website, Google will be informed that you have accessed the corresponding subpage of our website. In addition, the data indicated in I. of this privacy policy will be transmitted. This will occur regardless of whether or not you have a Google user account which you are logged into. If you are logged in with Google, your data will be directly linked to your account. If you do not wish this data to be linked to your Google profile, you should log out before activating the button. Google stores your data in the form of user profiles and uses these for advertising and market research purposes and/or to customize its website. Such use will mainly occur (even for users who are not logged in) to render targeted advertisement and to inform other users in the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google.

c) Further information regarding the purpose and scope of data collection and processing by the plug-in provider can be found in the provider’s privacy policy. You will also find further information there regarding your rights and the possible settings that can be used to protect your privacy: google.de/intl/de/policies/privacy. Google also processes your personal data in the US and is EU-US Privacy Shield certified, see www.privacyshield.gov/EU-US-Framework.

(3) Use of WhatsApp Business

We use WhatsApp Business as an information tool for those interested. Contact will be established by the interested party only. The data of the interested party will not be stored or used for future communication.

G.   Online advertising and user behavior analysis

Use of Google Ads conversion

(1) We use the services of Google Ads in order to draw attention to our attractive offers with the aid of advertising media (Google Ads) on external websites. We can track the success of individual advertisements in relation to the advertising campaign data. Our interest in this process is to show you advertising that you might find interesting, to make our website more interesting to you and to allocate our advertising budget more effectively.

(2) These advertising media are supplied by Google via “ad servers”. For this purpose, we use ad server cookies which enable the measurement of certain performance metrics such as the display of ads or user clicks. If you access our website through a Google advert, Google Ads will store a cookie on your computer. These cookies usually expire after 30 days and are not intended to identify you personally. A cookie of this type will normally contain data for analysis such as the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (a flag specifying that the user no longer wishes to be shown advertising).

(3) These cookies enable Google to recognize your Internet browser. If a user visits specific pages on the website of an Ads customer and the cookie stored on the user’s computer has not yet expired, Google and the customer will be able to recognize that the user has clicked on the ad and has been redirected to this page. Each Google Ads customer is assigned a different cookie. It is therefore not possible to track cookies across multiple Google Ads customers’ websites. We do not collect or process any personal data in connection with the aforementioned advertising measures. We only receive statistical evaluations from Google. On the basis of these evaluations we can determine which advertising measures have been particularly effective. We do not receive any further data from using these advertising media and we cannot identify users based on this information.

(4) This advertising tool automatically establishes a connection between your browser and Google’s servers. We have no influence on the scope and further use of the data that Google collects via this tool and we can therefore only inform you to the best of our knowledge: Through Google Ads conversion tracking, Google receives the information that you accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, the provider may obtain and store your IP address.

(5) You can opt out of this tracking procedure in various ways:

a) by adjusting the settings in your browser software to block third-party cookies in order to stop receiving ads from third-party providers
b) by disabling cookies for conversion tracking when you adjust the settings of your browser so that cookies from the domain “www.googleadservices.com” are blocked, google.de/settings/ads; please note that this setting will be deleted when you delete your cookies
c) by deactivating targeted ads from providers that are part of the “About Ads” self-regulatory campaign via the link www.aboutads.info/choices; please note that this setting will be deleted when you delete your cookies
d) by permanently deactivating the placement of cookies in your Firefox, Microsoft Edge or in Google Chrome browser via the link www.google.com/settings/ads/plugin; please note that in this case you may not be able to access the full functionality of our website
(e) The legal basis for the processing of your data is Article 6(1)(f) GDPR. Further information on Google’s privacy policy can be found here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org. Google is EU-US Privacy Shield certified, see https://www.privacyshield.gov/EU-US-Framework.

Use of Facebook Custom Audiences (Pixel/Cookies)

A tracking pixel is used on our website. The tracking pixel is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. We use Facebook pixel to measure the effectiveness of our Facebook ad campaigns and to optimize how we present Facebook ad campaigns to interested target groups.

When you click on a Facebook ad or visit our website, the pixel on our website is used to store a cookie on your device. The cookie processes data on whether you came to our website via a Facebook ad and facilitates the analysis of the user’s behavior until the transaction is completed. This allows us to measure the success rate of our Facebook ad campaigns. In addition, the pixel processes data that shows that you have visited our website and allows us to adapt the ads displayed on Facebook to your interests.

Through the Facebook pixel, a direct connection to the Facebook servers is made when you visit our website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to Facebook. Facebook adheres to the EU-U.S. Privacy Shield Framework whenever data is transferred to Facebook Inc. in the USA.

The certification is available at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

You can find more information about Facebook’s privacy policy at https://www.facebook.com/help/568137493302217.

The cookie remains permanently on your device, even after closing the web browser, and enables us to recognize you the next time you visit our website. The data collected is anonymous to us and will not reveal your identity to us. If you have a Facebook account, Facebook can link the collected information to your personal account. Even if you do not have a Facebook account or are not logged in when you visit our website, Facebook can process and store your IP address and other identification data.

You can withdraw your consent to the processing of your data through Facebook pixel for our website at any time, though such changes will not have retroactive effect. Please note that you will have to re-establish the link if you delete the cookies in your browser in the meantime. Furthermore, you can disable the use of cookies by adjusting the relevant settings in your Facebook account at https://www.facebook.com/settings?tab=ads.

The legal basis for such processing is your consent in accordance with Article 6(1)(a) GDPR.

H. Processing of applications

(1) Section on apprenticeships at Provadis

a) Retention period
Provadis processes the personal data you provide as part of your application exclusively for the purpose of the application procedure so that Provadis can facilitate apprenticeship positions and/or offer apprenticeships with cooperating companies of Provadis that take on apprentices (hereinafter referred to as “Companies”). After receiving your application, Provadis will retain your application data for no more than 12 months.

b) Data categories, purpose of processing and legal basis
Provadis processes the personal data from your application, which you provide on the applicant portal (using the form or the attachment), to select applicants. If Provadis finds you to be a suitable candidate, your data will be sent to the Companies for further processing as part of the selection process. Your data can then be accessed by the apprenticeship supervisors and recruiters at the respective Companies.

Provadis processes personal data from your application and during the selection process, including:

  • First and last name
  • Application photo
  • Nationality
  • Contact details (such as home address, phone number)
  • Adult / minor
  • Application data (such as school leaving certificate, school grades, career aspirations, internships, professional experience, reference letters)
  • Data from application questionnaires
  • Data from aptitude tests (which may still have to be carried out)
  • Data from applicant interviews (which may still have to be carried out)
  • Information channels that led to the application

Data about information channels through which you became aware of apprenticeship and study programs at Provadis will always be anonymized before we analyze and use it for marketing campaigns.
The legal basis is Article 6(1)(b) GDPR.

c) Specific categories of personal data
You consent that Provadis may collect and process the following specific categories of personal data:

If your application contains specific categories of personal data (e.g. information about your health, a photo that allows us to infer your ethnic background, your visual acuity and/or your religion), this may be processed only with your consent. Through the submission of this information you consent to Provadis processing the specific categories of personal data from your application letter and included attachments for the purpose of carrying out the application process. The sole purpose of your consent is to allow us to consider the application in its present form. The information will not be taken into account in the application process unless there is a legal obligation to do so, which exists especially in the case of applications submitted by individuals with severe disabilities. Your data will not be transferred to third parties other than the aforementioned Companies. You are under no obligation to provide these specific categories of personal data in your application. Providing or not providing this information will not affect the outcome of your application.

d) Withdrawal of consent
You can withdraw your consent at any time (preferably by email at ausbildung@provadis.de or by regular mail to: Provadis Partner für Bildung und Beratung GmbH, Personalcenter, Building B852, Industriepark Höchst, 65926 Frankfurt am Main, Germany). In the event of a withdrawal of consent, your data covered by the consent will be deleted immediately. However, if you withdraw your consent, we will not be able to consider your submitted application in its present form.

e) Disclosure of personal data to third parties
When processing data, Provadis may employ external service providers (“processors”), e.g. for IT maintenance. These service providers must only act on the instructions of Provadis and are contractually bound to comply with the applicable data privacy requirements.

f) Retention period of data from aptitude tests
If you take an aptitude test, this will consist of several different task groups. The test data is stored in the Provadis education management system. Provadis uses this data in order to assess the applicant’s suitability. In the case of an unsuccessful application, this data will be deleted together with the other personal data (see above). In the case of a successful application, this data will be stored for the duration of the legal retention period (usually 10 years) and then deleted.

g) Right of access, right to rectification, right to erasure or restriction of your personal data, right to object, as well as right to data portability

Applicable data protection law grants you the following rights:

  • to request Provadis to confirm whether Provadis processes your personal data, and, if so, to request access to this personal data as well as to further information
  • to request the rectification of inaccurate personal data
  • to request the erasure of personal data processed by Provadis
  • to request Provadis to restrict processing of your personal data
  • to receive the personal data, which you have provided to Provadis, in a structured, commonly used and machine-readable format or to request to have this data transmitted to a third party
  • to object to the processing of your personal data by Provadis

h) Contact details for data protection
The Data Protection Officer will assist you in all matters concerning data protection. You can also lodge a complaint with them and contact them to exercise your rights regarding data protection. You can reach the Data Protection Officer at datenschutz@infraserv.com.

Provadis always seeks to address as well as resolve queries and complaints received via the above channels. In addition to the contact options above, you may contact the appropriate supervisory authority, “Der Hessische Datenschutzbeauftragte” (The Hessian Data Protection Officer).

Der Hessische Datenschutzbeauftragte
Postfach 3163
65021 Wiesbaden
Germany

Phone: +49 611 1408-0
Fax: +49 611 1408-611
poststelle(at)datenschutz.hessen.de

(2) Section on pupil internships/technical secondary school internships at Provadis

a) Retention period
Provadis processes the personal data that you provide as part of your application exclusively for the purpose of the application procedure so that Provadis can facilitate internship positions and/or offer pupil internships/technical secondary school internships with cooperating companies of Provadis that take on interns (hereinafter referred to as “Companies”) (available at the following link). After receiving your application, Provadis will retain your application data for no more than 12 months.

b) Data categories, purpose of processing and legal basis
Provadis processes the personal data from your application, which you provide on the applicant portal (using the form or the attachment), to select applicants. If Provadis finds you to be a suitable candidate, your data will be sent to Companies for further processing as part of the selection process. Your data can then be accessed by parties in charge of the internships and by internship supervisors at the respective companies.

Provadis processes personal data from your application and during the selection process, including:

  • First and last name
  • Application photo
  • Nationality
  • Contact details (such as home address, phone number)
  • Adult/minor
  • Application data (such as school leaving certificate, school grades, career aspirations, internships, professional experience, reference letters)
  • Data from application questionnaires
  • Information channels that led to the application

Data about information channels through which you became aware of internship opportunities, apprenticeships and study programs at Provadis will always be anonymized before we analyze and use it for marketing campaigns.
The legal basis is Article 6(1)(b) GDPR.

c) Specific categories of personal data
You consent that Provadis may collect and process the following specific categories of personal data:

If your application contains specific categories of personal data (e.g. information about your health, a photo that allows us to infer your ethnic background, your visual acuity and/or your religion), this may be processed only with your consent. Through the submission of this information you consent to Provadis processing the specific categories of personal data from your application letter and attachments for the purpose of carrying out the application process. The sole purpose of your consent is to allow us to consider the application in its present form. The information will not be taken into account in the application process unless there is a legal obligation to do so, which exists especially in the case of applications submitted by individuals with severe disabilities. Your data will not be transferred to third parties other than the aforementioned Companies. You are under no obligation to provide these specific categories of personal data in your application. Providing or not providing this information will not affect the outcome of your application.

d) Withdrawal of consent
You can withdraw your consent at any time (preferably by email at ausbildung@provadis.de or by regular mail to: Provadis Partner für Bildung und Beratung GmbH, Personalcenter, Building B852, Industriepark Höchst, 65926 Frankfurt am Main, Germany). In the event of a withdrawal of consent, your data covered by the consent will be deleted immediately. However, if you withdraw your consent, we will not be able to consider your submitted application in its present form.

e) Disclosure of personal data to third parties
When processing data, Provadis may employ external service providers (“processors”), e.g. for IT maintenance. These service providers must only act on the instructions of Provadis and are contractually bound to comply with the applicable data protection requirements.

f) Retention period of data from aptitude tests
If you take an aptitude test, this will consist of several different task groups. The test data is stored in the Provadis education management system. Provadis uses this data in order to assess the applicant’s suitability. In the case of an unsuccessful application, this data will be deleted together with the other personal data (see above). In the case of a successful application, this data will be stored for the duration of the legal retention period (usually 10 years) and then deleted.

g) Right of access, right to rectification, right to erasure or restriction of your personal data, right to object, as well as right to data portability

Applicable data protection law grants you the following rights:

  • to request Provadis to confirm whether Provadis processes your personal data, and, if so, to request access to this personal data as well as to further information
  • to request the rectification of inaccurate personal data
  • to request the erasure of personal data processed by Provadis
  • to request Provadis to restrict processing of your personal data
  • to receive the personal data, which you have provided to Provadis, in a structured, commonly used and machine-readable format or to request to have this data transmitted to a third party
  • to object to the processing of your personal data by Provadis

h) Contact details for data protection
The Data Protection Officer will assist you in all matters concerning data protection. You can also lodge a complaint with them and contact them to exercise your rights regarding data protection. You can reach the Data Protection Officer at datenschutz@infraserv.com.

Provadis always seeks to address as well as resolve queries and complaints received via the above channels. In addition to the contact options above, you may contact the appropriate supervisory authority, “Der Hessische Datenschutzbeauftragte” (The Hessian Data Protection Officer).

Der Hessische Datenschutzbeauftragte
Postfach 3163
65021 Wiesbaden
Germany

Phone: +49 611 1408-0
Fax: +49 611 1408-611
poststelle(at)datenschutz.hessen.de

(3) Section on staff recruitment and temporary employment

a) The handling of personal data as part of the online application process

Provadis Professionals GmbH (hereinafter referred to as “Professionals”) processes personal data you provide as part of your application exclusively for the purpose of the application procedure in the context of staff recruitment and/or a new working relationship according to the current version of the German Temporary Employment Act (Arbeitnehmerüberlassungsgesetz) with contracting customer companies and/or cooperating partners of Professionals.

b) Data categories, purpose of processing and legal basis
Professionals processes the personal data from your application, which you provide on your application form, to select applicants. If Professionals finds you to be a suitable candidate, your data will be sent to the Companies for further processing as part of the selection process. Your data can then be accessed by recruiters or by parties in charge of the recruitment at the respective companies.

Professionals processes personal data from your application and during the selection process, including:

  • First and last name
  • Application photo
  • Nationality
  • Contact details (such as home address, phone number)
    Application data (such as school leaving certificate, school grades, career aspirations, internships, professional experience, reference letters)
  • Data from aptitude tests
  • Data from applicant interviews
  • Information channels that led to the application

Data about information channels through which you became aware of job opportunities at Professionals will always be anonymized before we analyze and use it for marketing campaigns.
The legal basis is Article 6(1)(b) GDPR.

c) Specific categories of personal data

You consent that Professionals may collect and process the following specific categories of personal data:

If your application contains specific categories of personal data (e.g. information about your health, a photo that allows us to infer your ethnic background, your visual acuity and/or your religion), this may be processed only with your consent. Through the submission of this information you consent to Professionals processing the specific categories of personal data from your application letter and included attachments for the purpose of carrying out the application process. The sole purpose of your consent is to allow us to consider the application in its present form. The information will not be taken into account in the application process unless there is a legal obligation to do so, which exists especially in the case of applications submitted by individuals with severe disabilities. Your data will not be transferred to third parties other than the aforementioned contracting customer companies and/or cooperating partners. You are under no obligation to provide these specific categories of personal data in your application. Providing or not providing this information will not affect the outcome of your application.

d) Withdrawal of consent

You can withdraw your consent at any time (preferably by email at service@provadis-professionals.de or by regular mail to: Provadis Professionals GmbH, Personalcenter, Building B852, Industriepark Höchst, 65926 Frankfurt am Main, Germany). In the event of a withdrawal of consent, your data covered by the consent will be deleted immediately. However, if you withdraw your consent, we will not be able to consider your submitted application in its present form.

e) Disclosure of personal data to third parties

When processing data, Professionals may employ external service providers (“processors”), e.g. for IT maintenance. These service providers must only act on the instructions of Professionals and are contractually bound to comply with the applicable data protection requirements. During the application procedure, your personal data may also be integrated into customer systems in order to be able to carry out the application procedure. Professionals has formed data processing contracts with these customer companies.

f) Retention period

Should you, in the course of the application procedure, take up employment according to the current version of the German Temporary Employment Act (Arbeitnehmerüberlassungsgesetz) with Professionals, your personal data will be stored for the duration of the legal retention period (usually 10 years) and then deleted.

g) Right of access, right to rectification, right to erasure or restriction of your personal data, right to object, as well as right to data portability

Applicable data protection law grants you the following rights:

  • to request Professionals to confirm whether Professionals processes your personal data, and, if so, to request access to this personal data as well as to further information
  • to request the rectification of inaccurate personal data
  • to request the erasure of personal data processed by Professionals
  • to request Professionals to restrict processing of your personal data
  • to receive the personal data, which you have provided to Professionals, in a structured, commonly used and machine-readable format or to request to have this data transmitted to a third party
  • to object to the processing of your personal data by Professionals.

h) Contact details for data protection

The Data Protection Officer will assist you in all matters concerning data protection. You can also lodge a complaint with them and contact them to exercise your rights regarding data protection. You can reach the Data Protection Officer at datenschutz@infraserv.com.

Professionals always seeks to address as well as resolve queries and complaints received via the above channels. In addition to the contact options above, you may contact the appropriate supervisory authority, “Der Hessische Datenschutzbeauftragte” (The Hessian Data Protection Officer).

Der Hessische Datenschutzbeauftragte
Postfach 3163
65021 Wiesbaden
Germany

Phone: +49 611 1408-0
Fax: +49 611 1408-611
poststelle(at)datenschutz.hessen.de

(4) Section on the Provadis School of International Management and Technology

a) The handling of personal data as part of the online application process of Provadis School of International Management and Technology (hereinafter referred to as “Provadis School”)

Provadis School processes personal data you provide as part of your application exclusively for the purpose of the study program application procedure.

b) The handling of personal data when Provadis School facilitates practice positions at cooperating companies

If necessary Provadis School processes personal data that you provide as part of your application exclusively for the purpose of facilitating practice positions in the context of the dual study program together with the cooperating companies of Provadis School. In this process, the digitally stored data and documents that you have provided, such as your résumé, all available certificates as well as reference letters or other certificates (e.g. language certificates), will be sent to the respective companies. If the contract with the school is terminated and/or the placement is cancelled, your personal data will be deleted the, at the latest, after a period of 24 months.

c) Data categories, purpose of processing and legal basis

Provadis School processes the personal data from your application, which you provide on the applicant portal (using the form or the attachment), to select applicants.

Provadis School processes personal data from your application and during the selection process, including:

  • First and last name
  • Application photo
  • Nationalities
  • Contact details (such as home address, phone number)
  • Date of birth
  • Application data (such as school leaving certificate, school grades, career aspirations, internships, professional experience, reference letters)
  • Data from application questionnaires
  • Data from aptitude tests (which may still have to be carried out)
  • Data from applicant interviews (which may still have to be carried out)

Data about information channels through which you became aware of study opportunities at Provadis School will always be anonymized before we analyze and use it for marketing campaigns.
The legal basis is Article 6(1)(b) GDPR.

d) Specific categories of personal data

You consent that Provadis School may collect and process the following specific categories of personal data:

If your application contains specific categories of personal data (e.g. information about your health, a photo that allows us to infer your ethnic background, your visual acuity and/or your religion), this may be processed only with your consent. Through the submission of this information you consent to Provadis School processing the specific categories of personal data from your application letter and attachments for the purpose of carrying out the application process. The sole purpose of your consent is to allow us to consider the application in its present form. The information will not be taken into account in the application process unless there is a legal obligation to do so, which exists especially in the case of applications submitted by individuals with severe disabilities. Your data will not be transferred to third parties other than the aforementioned Companies. You are under no obligation to provide these specific categories of personal data in your application. Providing or not providing this information will not affect the outcome of your application.

e) Withdrawal of consent

You can withdraw your consent at any time (preferably by email at

info@provadis-hochschule.de

or by regular mail to:

Provadis School of International Management and Technology,
Industriepark Höchst, Building B835,
65926 Frankfurt am Main, Germany

In the event of a withdrawal of consent, your data covered by the consent will be deleted immediately. However, if you withdraw your consent, we will not be able to consider your submitted application in its present form.

f) Disclosure of personal data to third parties
When processing data, Provadis School may employ external service providers (“processors”), e.g. for IT maintenance. These service providers must only act on the instructions of Provadis School and are contractually bound to comply with the applicable data protection requirements.

g) Retention period of data from aptitude tests
If you take an aptitude test, this will consist of several different task groups. The test data is stored in the management system of Provadis School. Provadis School uses this data in order to assess the applicant’s suitability. In the case of an unsuccessful application, this data will be deleted together with the other personal data (see above). In the case of a successful application, this data will be stored for the duration of the legal retention period (usually 60 years) and then deleted.

h) Right of access, right to rectification, right to erasure or restriction of your personal data, right to object, as well as right to data portability

Applicable data protection law grants you the following rights:

  • to request Provadis School to confirm whether Provadis School processes your personal data, and, if so, to request access
  • to this personal data as well as to further information
  • to request the rectification of inaccurate personal data
  • to request the erasure of personal data processed by Provadis School
  • to request Provadis School to restrict processing of your personal data
  • to receive the personal data, which you have provided to Provadis School, in a structured, commonly used and machine-readable format or to request to have this data transmitted to a third party
  • to object to the processing of your personal data by Provadis School

i) Contact details for data protection
The Data Protection Officer will assist you in all matters concerning data protection. You can also lodge a complaint with them and contact them to exercise your rights regarding data protection. You can reach the Data Protection Officer at datenschutz@infraserv.com.

Provadis School always seeks to address as well as resolve queries and complaints received via the above channels. In addition to the contact options above, you may contact the appropriate supervisory authority, “Der Hessische Datenschutzbeauftragte” (The Hessian Data Protection Officer).

Der Hessische Datenschutzbeauftragte
Postfach 3163
65021 Wiesbaden
Germany

Phone: +49 611 1408-0
Fax: +49 611 1408-611
poststelle@datenschutz.hessen.de

Last updated: 20.07.2020